Page MenuHomeFreeBSD

securityUmbrella
ActivePublic

Recent Activity

Sep 1 2018

jmg added a comment to D15713: Bug 182518 - [login.conf] Better Password Hashes .

All comments are minor.

Sep 1 2018, 6:40 PM · security

Aug 20 2018

ler added a comment to D15713: Bug 182518 - [login.conf] Better Password Hashes .

Any chance of this being moved forward in time for the 12 branch?

Aug 20 2018, 12:32 AM · security

Aug 16 2018

482254ac_razorfever.net added inline comments to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Aug 16 2018, 10:05 AM · security
482254ac_razorfever.net updated the diff for D15713: Bug 182518 - [login.conf] Better Password Hashes .

I'm hopeful that this fixes style, and other suggestions from delphij.

Aug 16 2018, 10:00 AM · security

Aug 9 2018

482254ac_razorfever.net updated the diff for D15713: Bug 182518 - [login.conf] Better Password Hashes .

Updates remaining man styles.

Aug 9 2018, 10:22 AM · security

Aug 3 2018

482254ac_razorfever.net added inline comments to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Aug 3 2018, 8:33 PM · security
delphij added inline comments to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Aug 3 2018, 5:58 PM · security
emaste added a comment to D15713: Bug 182518 - [login.conf] Better Password Hashes .

In fairness, this example pre-dates the crypt_r in FreeBSD by 4+ years.

Aug 3 2018, 2:26 PM · security
482254ac_razorfever.net added inline comments to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Aug 3 2018, 10:35 AM · security

Aug 2 2018

482254ac_razorfever.net added inline comments to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Aug 2 2018, 10:33 AM · security

Aug 1 2018

delphij requested changes to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Aug 1 2018, 2:51 AM · security

Jul 31 2018

482254ac_razorfever.net updated the diff for D15713: Bug 182518 - [login.conf] Better Password Hashes .

This update covers the linting, and simplified example code in the libcrypt manpage.

Jul 31 2018, 8:32 PM · security

Jul 28 2018

delphij requested changes to D15713: Bug 182518 - [login.conf] Better Password Hashes .

Could you please split the proposed change to smaller pieces, so it would be easier to review?

Jul 28 2018, 12:10 AM · security

Jul 27 2018

allanjude added reviewers for D15713: Bug 182518 - [login.conf] Better Password Hashes : delphij, jmg.
Jul 27 2018, 10:58 PM · security

Jul 16 2018

bcr added a comment to D15713: Bug 182518 - [login.conf] Better Password Hashes .

There are a bunch of style issues with crypt.3. Can you run "mandoc -Tlint" and textproc/igor (from ports/packages) on it? It should give you some feedback where the problems are. For example, man pages need a line break after a sentence stop.

Jul 16 2018, 7:54 PM · security

Jun 11 2018

allanjude added a reviewer for D15713: Bug 182518 - [login.conf] Better Password Hashes : allanjude.
Jun 11 2018, 3:03 AM · security

Jun 10 2018

482254ac_razorfever.net updated the diff for D15713: Bug 182518 - [login.conf] Better Password Hashes .

Fix loop always executing twice (in pw+pam_unix), with leaky memory.

Jun 10 2018, 12:55 PM · security

Jun 9 2018

482254ac_razorfever.net updated the diff for D15713: Bug 182518 - [login.conf] Better Password Hashes .

Fix accent on David's name, per imp feedback.

Jun 9 2018, 9:26 PM · security
imp added inline comments to D15713: Bug 182518 - [login.conf] Better Password Hashes .
Jun 9 2018, 2:12 PM · security
482254ac_razorfever.net updated the summary of D15713: Bug 182518 - [login.conf] Better Password Hashes .
Jun 9 2018, 4:03 AM · security
482254ac_razorfever.net created D15713: Bug 182518 - [login.conf] Better Password Hashes .
Jun 9 2018, 4:02 AM · security

May 8 2018

mateusz_serveraptor.com added a watcher for security: mateusz_serveraptor.com.
May 8 2018, 8:30 PM

Mar 13 2018

badfilemagic_gmail.com removed a watcher for security: badfilemagic_gmail.com.
Mar 13 2018, 4:23 PM

Jul 7 2017

tz closed D11515: lang/php70: Update to 7.0.21 by committing rP445231: Update PHP 7 from 7.0.20 to 7.0.21.
Jul 7 2017, 9:58 AM · security
tz accepted D11515: lang/php70: Update to 7.0.21.
Jul 7 2017, 9:57 AM · security
tz closed D11516: lang/php71: Update to 7.1.7.

Was already committed in r445228.

Jul 7 2017, 9:46 AM · security
tz accepted D11516: lang/php71: Update to 7.1.7.
Jul 7 2017, 9:45 AM · security
i.dani_outlook.com created D11516: lang/php71: Update to 7.1.7.
Jul 7 2017, 9:37 AM · security
i.dani_outlook.com created D11515: lang/php70: Update to 7.0.21.
Jul 7 2017, 9:34 AM · security

Jun 30 2017

lwhsu changed the visibility for security.
Jun 30 2017, 6:40 PM

Jun 11 2017

badfilemagic_gmail.com added a watcher for security: badfilemagic_gmail.com.
Jun 11 2017, 3:31 PM

Mar 22 2016

lattera-gmail.com added a watcher for security: lattera-gmail.com.
Mar 22 2016, 12:22 AM

Jan 19 2016

bapt closed D4771: libfetch: test for /etc/ssl/cert.pem existence to avoid masking SSL_CA_CERT_PATH.
Jan 19 2016, 3:04 PM · security
bapt accepted D4771: libfetch: test for /etc/ssl/cert.pem existence to avoid masking SSL_CA_CERT_PATH.

As been committed as rS294326 (discussed with des)

Jan 19 2016, 3:04 PM · security

Jan 4 2016

john_saltant.com updated the test plan for D4771: libfetch: test for /etc/ssl/cert.pem existence to avoid masking SSL_CA_CERT_PATH.
Jan 4 2016, 12:55 PM · security

Jan 3 2016

john_saltant.com retitled D4771: libfetch: test for /etc/ssl/cert.pem existence to avoid masking SSL_CA_CERT_PATH from to libfetch: test for /etc/ssl/cert.pem existence to avoid masking SSL_CA_CERT_PATH.
Jan 3 2016, 11:44 PM · security

Oct 22 2015

koobs added a comment to D3463: Adopt higher level of stack protection..

Apologies, I intended to Commandeer -> Close.

Oct 22 2015, 9:57 AM · security
koobs commandeered D3463: Adopt higher level of stack protection..
Oct 22 2015, 9:56 AM · security
koobs updated subscribers of D3463: Adopt higher level of stack protection..
Oct 22 2015, 9:49 AM · security

Oct 8 2015

op added a child revision for D3463: Adopt higher level of stack protection.: D3848: follow up the latest stack-protector-strong changes in libc too.
Oct 8 2015, 8:52 PM · security
pfg abandoned D3463: Adopt higher level of stack protection..

This is already in the tree (apparently no one approved it though).

Oct 8 2015, 3:12 PM · security

Oct 4 2015

pfg added a comment to D3463: Adopt higher level of stack protection..

Committed as r288669.

Oct 4 2015, 7:11 PM · security
pfg updated the test plan for D3463: Adopt higher level of stack protection..
Oct 4 2015, 7:10 PM · security

Oct 3 2015

pfg added a comment to D3463: Adopt higher level of stack protection..

Results from exp-run (PR 2013394) are out:


Exp-run results on head i386:
http://package23.nyi.freebsd.org/jail.html?mastername=headi386PR203394-default

Oct 3 2015, 5:56 PM · security

Sep 28 2015

pfg added a comment to D3463: Adopt higher level of stack protection..

Peter Holm has kindly provided some testing:

Sep 28 2015, 2:37 PM · security

Sep 27 2015

sunpoet updated subscribers of D3463: Adopt higher level of stack protection..
Sep 27 2015, 4:25 PM · security

Sep 26 2015

pfg added a comment to D3463: Adopt higher level of stack protection..

...

Will it be possible that you can provide some basic test data, for instance, a few world stone runs on memory disk, and see how exactly the impact would be? It would be easier to convince people when you have first hand data, and although we know others have already do some testing, it's important to know if the same applies on FreeBSD because it's likely that the experiments were not on FreeBSD, and the result may be different.

Sep 26 2015, 3:17 AM · security

Sep 25 2015

delphij added a comment to D3463: Adopt higher level of stack protection..

I'll patch my laptop and have started a clean build so I'll see if there would be visible performance/other impact after running with it for a few days.

Sep 25 2015, 7:58 PM · security
milios_ccsys.com updated subscribers of D3463: Adopt higher level of stack protection..
Sep 25 2015, 9:30 AM · security

Aug 29 2015

pfg added a comment to D3463: Adopt higher level of stack protection..
Aug 29 2015, 7:53 PM · security